Vendor/product archive

sideway / hapi_crumb CVEs

Beta · best-effort

1 CVEs tagged to sideway / hapi_crumb — 0 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to sideway vendor archive

CVE-2014-7193

Published Dec 25, 2014

The Crumb plugin before 3.0.0 for Node.js does not properly restrict token access in situations where a hapi route handler has CORS enabled, which allows remote attackers to obtai…

CVSS 5.8 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1